d4bb547f3dd21ff4b0e22280ef83f4dca7fb5229657bcff888efa656356c6c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4bb547f3dd21ff4b0e22280ef83f4dca7fb5229657bcff888efa656356c6c65
Size

56KB
MD5

0e7706b6b04427db2e35163fb7cd9576
SHA1

e1be1213804fffbfb37dbba8282a6c7387bdf92d
SHA256

d4bb547f3dd21ff4b0e22280ef83f4dca7fb5229657bcff888efa656356c6c65
SHA512

b0948fd34118cab40f3431858aaaf83ecd551a5900b5210d234ec8b392618c3983d7541fc3d5b487703ab773e5c1d0fca4230b31cfdf68f2cb6ea6cd4599f1f4
SSDEEP

1536:7UfnK8gtAVS3s2+8pDVBhkEaxwM8Dt+gyPjjzV:rVoa+8x8xNg0j3V

Score

N/A

Malware Config

Signatures

Files

d4bb547f3dd21ff4b0e22280ef83f4dca7fb5229657bcff888efa656356c6c65
.exe windows x86

2dc7d0e1207fc8d9908ad5c2cf799f93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitVDM
GetProcessTimes
CreateNamedPipeA
GetModuleHandleA
CreateProcessInternalA
GetCurrentThreadId
FindResourceA
TerminateJobObject
SetCurrentDirectoryA
EscapeCommFunction
Heap32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE